RE: [Xen-users] Openswan and xen problems

["John A. Sullivan III" <jsullivan@xxxxxxxxxxxxxxxxxxx>]

That sounds like something that could keep me spinning my wheels for
hours if you hadn't told me! Thanks.  However, we are very hesitant to
use unstable on a production device.  Is there a way to solve the
problem in the 2.0.7 stable release? - John

On Sat, 2005-09-03 at 11:15 +0100, Ian Pratt wrote:
> If you're using -unstable, look for an earlier thread about using
> ethtool to disable checksum offload on the virtual interfaces. We do
> need to fix the underlying problem at some point, though.
> 
> Ian
> 
> > I'm trying to build a RoadWarrior VPN Gateway using openswan 
> > 2.4.0rc3 on a xen 2.0.7 domU.  I'm having a bit of trouble 
> > and before I beat my head against the wall for hours, I was 
> > wondering if anyone else has done this and can give me some pointers.
> > 
> > I am not using L2TP so I should not have the driver problem.  
> > When I disable ipsec on both the xen station and the 
> > CyberGuard SG580 were using for testing as the office gateway 
> > (as opposed to the RAS gateway), they can ping each other 
> > fine.  When I enable ipsec, it's as if the xen station does 
> > not want to listen to the SG.  The SG sends MI1 and there is 
> > no response.  The xen device sends MI1, the SG send MR1 and 
> > xen ignores it.
> > 
> > The same configuration with a non-xen gateway works fine.  
> > Please don't spend lots of time on this as I should put more 
> > time in myself before really crying for help but, if someone 
> > has done this or knows what the problem is, please let me 
> > know.  Thanks - John
> > --
> > John A. Sullivan III
> > Open Source Development Corporation
> > +1 207-985-7880
> > jsullivan@xxxxxxxxxxxxxxxxxxx
> > 
> > If you would like to participate in the development of an 
> > open source enterprise class network security management 
> > system, please visit http://iscs.sourceforge.net
> > 
> > 
> > _______________________________________________
> > Xen-users mailing list
> > Xen-users@xxxxxxxxxxxxxxxxxxx
> > http://lists.xensource.com/xen-users
> > 
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@xxxxxxxxxxxxxxxxxxx

Financially sustainable open source development
http://www.opensourcedevel.com


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users